A vulnerability was found in Besen BS20 EV Charging Station up to 20260426. It has been declared as problematic. This affects an unknown part of the component BLE/WiFi. Such manipulation leads to authentication bypass by capture-replay.
This vulnerability is listed as CVE-2026-9398. The attack must be carried out from within the local network. In addition, an exploit is available.
The original disclosure mentions, that “[t]hese vulnerabilities have been reported to Besen and we have received their acknowlegement that they are reviewing this as of April 2026.”
